Page MenuHomePhabricator

Clients not displaying in production
Closed, ResolvedPublic


Expected behavior

Clients appear in the clients list at when logged in to both the API Portal and Meta. This behavior works as expected in the beta cluster.

Observed behavior

Clients do not appear in the client list, giving this error:

Access to XMLHttpRequest at '' from origin '' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.

This is the same error we get in the beta cluster when encountering T264637. Interestingly, calling the endpoint directly in the browser ( does work.

Event Timeline

Change 647751 had a related patch set uploaded (by Ppchelko; owner: Ppchelko):
[operations/mediawiki-config@master] Enable wgRestAllowCrossOriginCookieAuth for meta in prod

Change 647751 merged by jenkins-bot:
[operations/mediawiki-config@master] Enable wgRestAllowCrossOriginCookieAuth for meta in prod

Mentioned in SAL (#wikimedia-operations) [2020-12-10T17:54:43Z] <ppchelko@deploy1001> Synchronized wmf-config/InitialiseSettings.php: gerrit:647751 T269809 (duration: 01m 05s)

Pchelolo claimed this task.
Pchelolo added a subscriber: Pchelolo.

Works now.